An editable Microsoft Word briefing for FSOs and small cleared contractors. Use it to prepare initial security briefings before classified access and refresher training every 12 months under 32 CFR 117.12.
The document is designed for contractors that do not operate authorized classified information systems. It provides a practical starting point that you can tailor to your facility, employees, reporting contacts, and security procedures.
Download the briefing — $129
Purchase once and download the editable Word document for your organization.
Digital files are sold as-is. Purchase does not include consulting, customization, document review, implementation assistance, or facility-specific compliance advice. Paid consulting services are available separately.
What the initial security briefing must cover
Before an employee may access classified information, 32 CFR 117.12(e) requires an initial security briefing that includes:
- Threat awareness, including insider threat awareness.
- Counterintelligence awareness.
- An overview of the information security classification system.
- Reporting obligations and requirements, including insider threat reporting.
- Cybersecurity training for authorized information system users in accordance with Cognizant Security Agency guidance.
- Security procedures and duties that apply to the employee’s position, plus the possible consequences of unauthorized disclosure.
A key point about cybersecurity training
Section 117.12(e)(5) requires cybersecurity training for authorized information system users in accordance with CSA guidance under 32 CFR 117.18(a)(1) and (2). This document is designed for contractors that do not operate authorized classified information systems. If your personnel are authorized users of such a system, provide the system-specific training required by your CSA in addition to the appropriate general briefing content.
Refresher training every 12 months
Under 32 CFR 117.12(k), contractors must provide cleared employees with security education and training every 12 months. Refresher training must reinforce the initial briefing, keep employees informed of regulatory changes, address relevant issues identified during contractor self-reviews, and be documented through program and participation records.
Annual insider threat awareness training is a separate requirement under 32 CFR 117.12(g)(2). The document links to free insider threat and counterintelligence awareness training that can support your overall program.
What the document includes
- An instantly downloadable Microsoft Word file.
- Clear initial and refresher briefing content for contractors that do not operate authorized classified information systems.
- Links to free insider threat and counterintelligence awareness training.
- Plain-language explanations and visual aids.
- Editable sections for your organization’s procedures, duties, reporting contacts, and additional training.
- A change log to document updates to the briefing.
How to use the briefing
- Review and customize the Word document for your facility and each employee’s role.
- Add any company-specific procedures, reporting channels, self-review findings, or current regulatory changes.
- Provide any separate training required for insider threat awareness, counterintelligence awareness, or authorized classified information system users.
- Deliver the briefing and maintain records of the program and employee participation.
Frequently asked questions
Does this document guarantee NISPOM compliance?
No. It is a customizable training resource that supports the briefing requirements in 32 CFR 117. Your organization remains responsible for tailoring the content, following current CSA guidance, delivering all required training, and maintaining records.
Who is this briefing designed for?
It is designed for cleared contractors that do not operate authorized classified information systems. Organizations with authorized classified systems may still use relevant general content, but they must add the cybersecurity training required by their CSA.
How often is refresher training required?
Cleared employees must receive security education and training every 12 months under 32 CFR 117.12(k).
Can I customize the document?
Yes. The Microsoft Word format lets you add organization-specific procedures, contacts, examples, and training material.
Get the editable security briefing
Purchase the combined initial security briefing and refresher training document for $129 and customize it for your organization.